Explore CVE records

CritPublished 31 Aug 2025, 10:48 WIB

CVE-2025-31100

WordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload Vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Mojoomla School Management allows Upload a Web Shell to a Web Server.This issue affects School Management: from n/a through 1.93.1 (02-07-2025).

Excerpt language: en.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated28 Apr 2026, 23:12 WIB

Official record

CritPublished 31 Aug 2025, 10:47 WIB

CVE-2024-32832

WordPress Login with Phone Number plugin <= 1.6.93 - Broken Access Control vulnerability

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.6.93.

Excerpt language: en.

CritPublished 30 Aug 2025, 20:48 WIB

CVE-2011-10032

Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

Sunway ForceControl version 6.1 SP3 and earlier contains a stack-based buffer overflow vulnerability in the SNMP NetDBServer service, which listens on TCP port 2001. The flaw is triggered when the service receives a specially crafted packet using opcode 0x57 with an overly long payload. Due to improper bounds checking …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated15 May 2026, 18:13 WIB

Official record

CritPublished 30 Aug 2025, 20:47 WIB

CVE-2009-20010

Dogfood CRM spell.php RCE

Dogfood CRM version 2.0.10 contains a remote command execution vulnerability in the spell.php script used by its mail subsystem. The vulnerability arises from unsanitized user input passed via a POST request to the data parameter, which is processed by the underlying shell without adequate escaping. This allows attacke…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated15 May 2026, 18:13 WIB

Official record

CritPublished 30 Aug 2025, 20:46 WIB

CVE-2009-20011

ContentKeeper Web Appliance < 125.10 RCE via mimencode

ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of file uploads via the mimencode CGI utility. The vulnerability allows unauthenticated attackers to upload and execute arbitrary scripts as the Apache user. Addit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS10v4.0KEVNot listedEPSSPresentUpdated15 May 2026, 18:13 WIB

Official record

CritPublished 30 Aug 2025, 20:44 WIB

CVE-2010-10016

BS.Player 2.57 Buffer Overflow via M3U Playlist Import

BS.Player version 2.57 (build 1051) contains a vulnerability in its playlist import functionality. When processing .m3u files, the application fails to properly validate the length of playlist entries, resulting in a buffer overflow condition. This flaw occurs during parsing of long URLs embedded in the playlist, allow…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS10v4.0KEVNot listedEPSSPresentUpdated15 May 2026, 18:13 WIB

Official record

CritPublished 30 Aug 2025, 20:43 WIB

CVE-2009-20009

Belkin Bulldog Plus Web Service Buffer Overflow

Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service authentication handler. When a specially crafted HTTP request is sent with an oversized Authorization header, the application fails to properly validate the input length before copying it into a fixed-si…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated15 May 2026, 18:13 WIB

Official record

CritPublished 30 Aug 2025, 10:58 WIB

CVE-2025-54946

SUNNET Corporate Training Management System - SQL Injection

A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands.

Excerpt language: en.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated30 Jan 2026, 10:35 WIB

Official record

CritPublished 30 Aug 2025, 10:50 WIB

CVE-2025-54945

SUNNET Corporate Training Management System - External Control of File Name or Path

An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary system commands via a malicious file by controlling the destination file path.

Excerpt language: en.

CVSS10v4.0KEVNot listedEPSSPresentUpdated30 Jan 2026, 10:36 WIB

Official record

CritPublished 30 Aug 2025, 10:42 WIB

CVE-2025-54943

SUNNET Corporate Training Management System - Missing Authorization

A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.

Excerpt language: en.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated30 Jan 2026, 10:37 WIB

Official record

CritPublished 30 Aug 2025, 10:37 WIB

CVE-2025-54942

SUNNET Corporate Training Management System - Missing Authentication for Critical Function

A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication.

Excerpt language: en.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated30 Jan 2026, 10:38 WIB

Official record

CritPublished 30 Aug 2025, 06:27 WIB

CVE-2025-34164

NetSupport Manager < 14.12.0000 Heap-Based Buffer Overflow

A heap-based buffer overflow vulnerability in NetSupport Manager 14.x versions prior to 14.12.0000 allows a remote, unauthenticated attacker to cause a denial of service (DoS) or execute arbitrary code.

Excerpt language: en.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated14 May 2026, 09:07 WIB

Official record

CritPublished 30 Aug 2025, 05:15 WIB

CVE-2025-58159

WeGIA Authenticated Arbitrary File Upload Leading To Remote Code Execution (RCE)

WeGIA is a Web manager for charitable institutions. Prior to version 3.4.11, a remote code execution vulnerability was identified, caused by improper validation of uploaded files. The application allows an attacker to upload files with arbitrary filenames, including those with a .php extension. Because the uploaded fil…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS10v3.1KEVNot listedEPSSPresentUpdated03 Sep 2025, 02:24 WIB

Official record

CritPublished 30 Aug 2025, 00:17 WIB

CVE-2025-52856

VioStor

An improper authentication vulnerability has been reported to affect VioStor. If a remote attacker, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: VioStor 5.1.6 build 20250621 and later

Excerpt language: en.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:47 WIB

Official record

CritPublished 29 Aug 2025, 10:33 WIB

CVE-2025-8857

Changing｜Clinic Image System - Use of Hard-coded Credentials

Clinic Image System developed by Changing contains hard-coded Credentials, allowing unauthenticated remote attackers to log into the system using administrator credentials embedded in the source code.

Excerpt language: en.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated29 Aug 2025, 20:26 WIB

Official record

CritPublished 29 Aug 2025, 10:28 WIB

CVE-2025-8861

Changing｜TSA - Missing Authentication

TSA developed by Changing has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents.

Excerpt language: en.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated29 Aug 2025, 20:25 WIB

Official record

CritPublished 29 Aug 2025, 09:02 WIB

CVE-2025-9605

Tenda AC21/AC23 GetParentControlInfo stack-based overflow

A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated29 Aug 2025, 20:31 WIB

Official record

CritPublished 29 Aug 2025, 00:50 WIB

CVE-2025-58059

Valtimo scripting engine can be used to gain access to sensitive data or resources

Valtimo is a platform for Business Process Automation. In versions before 12.16.0.RELEASE, and from 13.0.0.RELEASE to before 13.1.2.RELEASE, any admin that can create or modify and execute process-definitions could gain access to sensitive data or resources. This includes but is not limited to: running executables on t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated29 Aug 2025, 01:15 WIB

Official record

CritPublished 29 Aug 2025, 00:31 WIB

CVE-2025-58048

Paymenter Vulnerable to Remote Code Execution via Public File Uploads

Paymenter is a free and open-source webshop solution for hostings. Prior to version 1.2.11, the ticket attachments functionality in Paymenter allows a malicious authenticated user to upload arbitrary files. This could result in sensitive data extraction from the database, credentials being read from configuration files…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS10v3.1KEVNot listedEPSSPresentUpdated29 Aug 2025, 01:16 WIB

Official record

CritKEVPublished 28 Aug 2025, 23:45 WIB

CVE-2025-57819

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS10v4.0KEVListedEPSSPresentUpdated27 Feb 2026, 00:47 WIB

Official record

Find the CVE cohort

Severity

Matching records by UTC month

Signal coverage

Find the CVE cohort

Matching cohort composition

Severity

Matching records by UTC month

Signal coverage